# Vulnerabilities published in 2013


- [CVE-2013-7380](https://insights.sbomify.com/CVE-2013-7380/): Command injection in n/a (critical 9.8)
- [CVE-2013-7379](https://insights.sbomify.com/CVE-2013-7379/): API Admin Auth Weakness in tomato (medium 6.8)
- [CVE-2013-7378](https://insights.sbomify.com/CVE-2013-7378/): Potential Command Injection in hubot-scripts (critical 9.8)
- [CVE-2013-7377](https://insights.sbomify.com/CVE-2013-7377/): Potential Command Injection in codem-transcode (high 8.1)
- [CVE-2013-7376](https://insights.sbomify.com/CVE-2013-7376/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2013-7375](https://insights.sbomify.com/CVE-2013-7375/): SQL injection in n/a (high 7.5)
- [CVE-2013-7374](https://insights.sbomify.com/CVE-2013-7374/): Security feature bypass in n/a (medium 4.6)
- [CVE-2013-7373](https://insights.sbomify.com/CVE-2013-7373/): Weak cryptography in n/a (high 7.5)
- [CVE-2013-7372](https://insights.sbomify.com/CVE-2013-7372/): Weak cryptography in n/a (medium 5.0)
- [CVE-2013-7371](https://insights.sbomify.com/CVE-2013-7371/): Node Connect Reflected Cross-Site Scripting in Sencha Labs Connect middleware (medium 6.1)
- [CVE-2013-7370](https://insights.sbomify.com/CVE-2013-7370/): methodOverride Middleware Reflected Cross-Site Scripting in connect (medium 6.1)
- [CVE-2013-7369](https://insights.sbomify.com/CVE-2013-7369/): SQL injection in n/a (high 7.5)
- [CVE-2013-7368](https://insights.sbomify.com/CVE-2013-7368/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-7367](https://insights.sbomify.com/CVE-2013-7367/): Missing authorization in n/a (high 7.5)
- [CVE-2013-7366](https://insights.sbomify.com/CVE-2013-7366/): Denial of service in n/a (medium 5.0)
- [CVE-2013-7365](https://insights.sbomify.com/CVE-2013-7365/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-7364](https://insights.sbomify.com/CVE-2013-7364/): Missing authorization in n/a (high 7.5)
- [CVE-2013-7363](https://insights.sbomify.com/CVE-2013-7363/): Missing authorization in n/a (high 7.5)
- [CVE-2013-7362](https://insights.sbomify.com/CVE-2013-7362/): Command injection in n/a (high 7.5)
- [CVE-2013-7361](https://insights.sbomify.com/CVE-2013-7361/): Path traversal in n/a (medium 5.0)
- [CVE-2013-7360](https://insights.sbomify.com/CVE-2013-7360/): Path traversal in n/a (high 7.5)
- [CVE-2013-7359](https://insights.sbomify.com/CVE-2013-7359/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-7358](https://insights.sbomify.com/CVE-2013-7358/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-7357](https://insights.sbomify.com/CVE-2013-7357/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-7356](https://insights.sbomify.com/CVE-2013-7356/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-7355](https://insights.sbomify.com/CVE-2013-7355/): SQL injection in n/a (high 7.5)
- [CVE-2013-7354](https://insights.sbomify.com/CVE-2013-7354/): Integer overflow in n/a (medium 6.5)
- [CVE-2013-7353](https://insights.sbomify.com/CVE-2013-7353/): Integer overflow in n/a (medium 6.5)
- [CVE-2013-7352](https://insights.sbomify.com/CVE-2013-7352/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2013-7351](https://insights.sbomify.com/CVE-2013-7351/): Cross-site scripting in Shaarli (medium 6.1)
- [CVE-2013-7350](https://insights.sbomify.com/CVE-2013-7350/): Other in n/a (critical 10.0)
- [CVE-2013-7349](https://insights.sbomify.com/CVE-2013-7349/): SQL injection in n/a (high 7.5)
- [CVE-2013-7348](https://insights.sbomify.com/CVE-2013-7348/): Use after free in n/a (medium 4.6)
- [CVE-2013-7347](https://insights.sbomify.com/CVE-2013-7347/): Auth bypass in n/a (low 3.7)
- [CVE-2013-7346](https://insights.sbomify.com/CVE-2013-7346/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2013-7345](https://insights.sbomify.com/CVE-2013-7345/): Denial of service in n/a (medium 5.0)
- [CVE-2013-7344](https://insights.sbomify.com/CVE-2013-7344/): Code injection in n/a (medium 6.5)
- [CVE-2013-7343](https://insights.sbomify.com/CVE-2013-7343/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-7342](https://insights.sbomify.com/CVE-2013-7342/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-7341](https://insights.sbomify.com/CVE-2013-7341/): Moodle cross-site scripting (XSS) vulnerabilities (medium 4.3)
- [CVE-2013-7340](https://insights.sbomify.com/CVE-2013-7340/): Denial of service in n/a (medium 4.3)
- [CVE-2013-7339](https://insights.sbomify.com/CVE-2013-7339/): Null dereference in n/a (medium 4.7)
- [CVE-2013-7338](https://insights.sbomify.com/CVE-2013-7338/): Denial of service in n/a (high 7.1)
- [CVE-2013-7336](https://insights.sbomify.com/CVE-2013-7336/): Null dereference in n/a (low 1.9)
- [CVE-2013-7335](https://insights.sbomify.com/CVE-2013-7335/): DotNetNuke (DNN) Open redirect vulnerability (medium 4.3)
- [CVE-2013-7334](https://insights.sbomify.com/CVE-2013-7334/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2013-7333](https://insights.sbomify.com/CVE-2013-7333/): Denial of service in n/a (high 7.5)
- [CVE-2013-7332](https://insights.sbomify.com/CVE-2013-7332/): Denial of service in n/a (medium 5.0)
- [CVE-2013-7331](https://insights.sbomify.com/CVE-2013-7331/): Microsoft Internet Explorer Information Disclosure (medium 6.5, exploited in the wild)
- [CVE-2013-7330](https://insights.sbomify.com/CVE-2013-7330/): Jenkins allows attackers to configure restricted projects (medium 4.0)
- [CVE-2013-7329](https://insights.sbomify.com/CVE-2013-7329/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-7328](https://insights.sbomify.com/CVE-2013-7328/): Integer overflow in n/a (medium 5.8)
- [CVE-2013-7327](https://insights.sbomify.com/CVE-2013-7327/): Null dereference in n/a (medium 6.8)
- [CVE-2013-7326](https://insights.sbomify.com/CVE-2013-7326/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-7325](https://insights.sbomify.com/CVE-2013-7325/): Code injection in n/a (high 8.8)
- [CVE-2013-7324](https://insights.sbomify.com/CVE-2013-7324/): Other in n/a (medium 5.3)
- [CVE-2013-7323](https://insights.sbomify.com/CVE-2013-7323/): python-gnupg allows context-dependent attackers to execute arbitrary commands via shell metacharacters (high 7.5)
- [CVE-2013-7322](https://insights.sbomify.com/CVE-2013-7322/): Auth bypass in n/a (medium 4.9)
- [CVE-2013-7321](https://insights.sbomify.com/CVE-2013-7321/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-7320](https://insights.sbomify.com/CVE-2013-7320/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2013-7319](https://insights.sbomify.com/CVE-2013-7319/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-7318](https://insights.sbomify.com/CVE-2013-7318/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-7317](https://insights.sbomify.com/CVE-2013-7317/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-7316](https://insights.sbomify.com/CVE-2013-7316/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-7315](https://insights.sbomify.com/CVE-2013-7315/): Missing XML Validation in Spring Framework (medium 6.8)
- [CVE-2013-7314](https://insights.sbomify.com/CVE-2013-7314/): Denial of service in n/a (medium 6.8)
- [CVE-2013-7313](https://insights.sbomify.com/CVE-2013-7313/): Denial of service in n/a (medium 5.4)
- [CVE-2013-7312](https://insights.sbomify.com/CVE-2013-7312/): Denial of service in n/a (medium 5.4)
- [CVE-2013-7311](https://insights.sbomify.com/CVE-2013-7311/): Denial of service in n/a (medium 5.4)
- [CVE-2013-7310](https://insights.sbomify.com/CVE-2013-7310/): Denial of service in n/a (medium 5.4)
- [CVE-2013-7309](https://insights.sbomify.com/CVE-2013-7309/): Denial of service in n/a (medium 5.4)
- [CVE-2013-7308](https://insights.sbomify.com/CVE-2013-7308/): Denial of service in n/a (medium 5.4)
- [CVE-2013-7307](https://insights.sbomify.com/CVE-2013-7307/): Denial of service in n/a (medium 5.4)
- [CVE-2013-7306](https://insights.sbomify.com/CVE-2013-7306/): Denial of service in n/a (medium 5.4)
- [CVE-2013-7305](https://insights.sbomify.com/CVE-2013-7305/): Auth bypass in n/a (medium 4.3)
- [CVE-2013-7304](https://insights.sbomify.com/CVE-2013-7304/): Security feature bypass in n/a (medium 4.3)
- [CVE-2013-7303](https://insights.sbomify.com/CVE-2013-7303/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-7302](https://insights.sbomify.com/CVE-2013-7302/): Auth bypass in n/a (medium 6.8)
- [CVE-2013-7301](https://insights.sbomify.com/CVE-2013-7301/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-7300](https://insights.sbomify.com/CVE-2013-7300/): Path traversal in n/a (medium 5.0)
- [CVE-2013-7299](https://insights.sbomify.com/CVE-2013-7299/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-7298](https://insights.sbomify.com/CVE-2013-7298/): Denial of service in n/a (medium 5.0)
- [CVE-2013-7296](https://insights.sbomify.com/CVE-2013-7296/): Memory corruption in n/a (medium 5.0)
- [CVE-2013-7295](https://insights.sbomify.com/CVE-2013-7295/): Weak cryptography in n/a (medium 4.0)
- [CVE-2013-7294](https://insights.sbomify.com/CVE-2013-7294/): Denial of service in n/a (medium 5.0)
- [CVE-2013-7293](https://insights.sbomify.com/CVE-2013-7293/): Misconfiguration in n/a (medium 5.0)
- [CVE-2013-7292](https://insights.sbomify.com/CVE-2013-7292/): Auth bypass in n/a (low 3.5)
- [CVE-2013-7291](https://insights.sbomify.com/CVE-2013-7291/): Denial of service in n/a (low 1.8)
- [CVE-2013-7290](https://insights.sbomify.com/CVE-2013-7290/): Denial of service in n/a (low 1.8)
- [CVE-2013-7289](https://insights.sbomify.com/CVE-2013-7289/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-7288](https://insights.sbomify.com/CVE-2013-7288/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-7287](https://insights.sbomify.com/CVE-2013-7287/): Weak cryptography in n/a (critical 9.8)
- [CVE-2013-7286](https://insights.sbomify.com/CVE-2013-7286/): Weak cryptography in n/a (high 7.5)
- [CVE-2013-7285](https://insights.sbomify.com/CVE-2013-7285/): Command Injection in Xstream (critical 9.8)
- [CVE-2013-7284](https://insights.sbomify.com/CVE-2013-7284/): Deserialization in n/a (medium 6.8)
- [CVE-2013-7283](https://insights.sbomify.com/CVE-2013-7283/): Race condition in n/a (critical 9.3)
- [CVE-2013-7282](https://insights.sbomify.com/CVE-2013-7282/): Auth bypass in n/a (critical 10.0)
- [CVE-2013-7281](https://insights.sbomify.com/CVE-2013-7281/): The dgram_recvmsg function in net/ieee802154/dgram.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that (medium 4.9)
- [CVE-2013-7280](https://insights.sbomify.com/CVE-2013-7280/): Memory corruption in n/a (medium 4.3)
- [CVE-2013-7279](https://insights.sbomify.com/CVE-2013-7279/): Cross-site scripting in n/a (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2013/page/2/